$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa File: d0a4cbc1-e834-32c3-839f-4885799ef811.roa (raw, json) Hash identifier: FAOZ3l+OqelA31qaQA5sQTStrudZMfmq3HE4YBrd9ls= Subject key identifier: 94:9B:6B:8B:DF:98:6C:72:E0:C3:AA:47:86:C9:78:E8:A3:A7:8C:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0A692EF9BEFB9B608980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa Signing time: Thu 01 May 2025 17:24:59 +0000 ROA not before: Thu 01 May 2025 17:24:59 +0000 ROA not after: Wed 30 Jul 2025 17:24:59 +0000 asID: 22773 IP address blocks: 68.8.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0a:69:2e:f9:be:fb:9b:60:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:59 2025 GMT Not After : Jul 30 17:24:59 2025 GMT Subject: CN=9bb810d8-7f3a-4eba-86aa-4f8156d15a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:c5:bd:e6:94:12:1d:f3:b9:fb:23:33:c9: 41:a4:be:a6:e4:33:63:51:92:c1:f0:32:a3:26:61: 30:12:bb:1b:b9:3b:80:e0:1a:11:fd:d0:86:e6:e7: c8:ea:00:d7:d2:6c:7c:a7:8f:f2:7b:d9:da:4d:a2: 41:fe:59:49:e8:aa:dc:df:c6:e6:c2:56:96:21:22: 14:85:73:eb:31:b2:78:47:cf:1a:a8:8e:f2:e6:f2: 39:bd:2f:3d:78:03:2b:63:77:20:bf:fb:96:44:91: 0b:4b:68:4b:4a:ab:fe:69:89:1c:28:a4:a2:48:47: 2a:64:4d:97:7a:84:11:22:2d:8b:30:13:cf:ca:a3: d6:51:d5:c9:f6:51:49:a8:81:c0:f9:57:0b:08:cf: f4:3e:e3:49:9d:aa:52:81:63:9a:63:23:52:aa:98: 64:b1:f5:dc:31:39:dd:af:86:f6:5a:2f:c9:c3:13: 0f:d7:27:be:cc:6e:cd:04:35:8c:49:c3:fe:55:9b: 2b:f4:7a:ba:6f:af:95:6c:20:87:b1:21:53:29:db: ce:f0:ae:14:36:6a:6b:be:e3:14:d5:e6:db:5c:94: 11:da:c3:86:a4:0d:1d:f2:8e:ad:87:53:c6:20:55: 6d:84:0b:14:5b:64:98:ac:be:81:a5:c4:f8:ce:da: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9B:6B:8B:DF:98:6C:72:E0:C3:AA:47:86:C9:78:E8:A3:A7:8C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:81:71:16:a2:00:b2:7d:09:bf:90:36:4e:c0:37:59:37:74: c5:55:8b:d4:1d:6b:5d:04:b2:10:a1:b4:87:ff:2d:67:c8:f5: 64:82:d5:58:52:5d:c8:4e:45:1f:4f:c5:3b:0e:e5:33:36:31: 7f:60:c0:30:e0:fb:3c:5a:0d:34:df:30:c3:4f:35:38:7c:48: a9:f0:05:c5:1f:d2:bf:63:a2:0b:b6:e3:5e:6e:99:a5:63:4c: 0f:79:94:fb:77:f4:4d:c8:da:4f:95:18:5b:a7:8a:bd:80:31: a2:9a:33:ef:e8:c4:7a:75:0a:6d:d1:19:39:63:95:b3:cf:04: 1f:9b:62:1f:00:35:04:50:70:83:60:09:15:7d:0e:5c:bf:b4: e1:71:b1:b1:e8:06:0d:f9:87:b7:26:7a:b1:83:7e:d3:b6:90: 42:fa:91:3a:68:b1:15:49:d9:aa:24:ee:a9:f4:4c:fd:e6:75: 35:57:5f:ed:f0:80:52:2d:ed:6e:71:76:7a:54:f5:44:db:0a: b9:f2:c7:a9:0b:58:5b:12:c2:50:34:75:50:81:d7:57:68:f4: 07:db:26:17:91:d6:82:a8:86:fd:d5:ad:25:3d:0a:5f:ee:cb: 68:76:27:ba:ab:a0:9b:9a:9f:fa:a3:a9:60:5f:1b:0a:2b:34: 8a:2d:fc:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/QppLvm++5tgiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1OVoXDTI1MDczMDE3MjQ1OVowLzEtMCsGA1UEAxMk OWJiODEwZDgtN2YzYS00ZWJhLTg2YWEtNGY4MTU2ZDE1YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DbFveaUEh3zufsjM8lBpL6m5DNjUZLB8DKj JmEwErsbuTuA4BoR/dCG5ufI6gDX0mx8p4/ye9naTaJB/llJ6Krc38bmwlaWISIU hXPrMbJ4R88aqI7y5vI5vS89eAMrY3cgv/uWRJELS2hLSqv+aYkcKKSiSEcqZE2X eoQRIi2LMBPPyqPWUdXJ9lFJqIHA+VcLCM/0PuNJnapSgWOaYyNSqphksfXcMTnd r4b2Wi/JwxMP1ye+zG7NBDWMScP+VZsr9Hq6b6+VbCCHsSFTKdvO8K4UNmprvuMU 1ebbXJQR2sOGpA0d8o6th1PGIFVthAsUW2SYrL6BpcT4ztqdpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSba4vfmGxy4MOqR4bJeOijp4zBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDBhNGNiYzEtZTgzNC0z MmMzLTgzOWYtNDg4NTc5OWVmODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuBcRaiALJ9Cb+QNk7AN1k3dMVVi9Qda10EshChtIf/LWfI9WSC1VhS XchORR9PxTsO5TM2MX9gwDDg+zxaDTTfMMNPNTh8SKnwBcUf0r9jogu2415umaVj TA95lPt39E3I2k+VGFunir2AMaKaM+/oxHp1Cm3RGTljlbPPBB+bYh8ANQRQcINg CRV9Dly/tOFxsbHoBg35h7cmerGDftO2kEL6kTposRVJ2aok7qn0TP3mdTVXX+3w gFIt7W5xdnpU9UTbCrnyx6kLWFsSwlA0dVCB11do9AfbJheR1oKohv3VrSU9Cl/u y2h2J7qroJuan/qjqWBfGworNIot/H0= -----END CERTIFICATE-----Generated at Sun May 11 09:37:55 2025 by rpki-client